Security Directory

W

WAT - Wiener Arbeiter Turn- und Sportverband

wienlaeuft.at

42

Wienläuft is a community-focused running and sports initiative operated by the Wiener Arbeiter Turn- und Sportverband (WAT) in Vienna, Austria. The organization provides running events, training sessions, and community sports activities targeting local sports enthusiasts and runners. The website serves as an information hub for upcoming events, news, and partner collaborations, positioning Wienläuft as a key local non-profit sports organizer in Vienna. Technically, the website is built on the Internetkonzepte.at CMS platform and utilizes common web technologies such as jQuery, Font Awesome, and Google Fonts. It features responsive design elements and moderate performance, with basic SEO and accessibility implementations. The site integrates social media plugins and cookie consent mechanisms, reflecting a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and a formal security policy or vulnerability disclosure mechanism. Privacy compliance is addressed through a GDPR-compliant privacy policy and cookie consent banner. Contact information is clearly provided, enhancing business credibility. Overall, Wienläuft presents a trustworthy and professional online presence suitable for its community sports mission. Strategic improvements in security headers, accessibility, and formal security policies would further strengthen its posture and compliance.

V

VERA - Vertrauensstelle gegen Belästigung und Gewalt in Kunst, Kultur und Spor

vera-vertrauensstelle.at

42

VERA is a specialized non-profit trust center operating in Austria, dedicated to supporting victims of violence and harassment within the arts, culture, and sports sectors. The organization is jointly operated by two independent associations focusing on these sectors, providing confidential support, guidance, and referrals to affected individuals. The website reflects a clear mission with professional design and targeted content for its audience of artists, cultural workers, and athletes. The presence of government funding logos enhances trust and legitimacy. Technically, the website is built on WordPress using Elementor and related plugins, ensuring a modern and responsive design. SEO is well addressed with Yoast SEO integration and proper meta tags. Performance is moderate with good mobile optimization. However, some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partially met with a privacy policy and cookie policy present, but lacking an explicit cookie consent mechanism. Contact information is clearly provided with dedicated emails and phone numbers for different sectors. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website is trustworthy and professional, serving a critical social function. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance compliance and security posture.

T

tutgut.at Magazin

tutgut.at

42

TutGut.at is a German-language online magazine focused on health, fitness, wellbeing, and nutrition topics targeting a general audience interested in holistic health. The website is powered by WordPress with Elementor and uses modern SEO tools like Rank Math. It features regularly updated content with a professional design and clear navigation. The business model includes content publishing with affiliate marketing, primarily through Amazon Partner links. Technically, the site is well-structured, mobile-optimized, and uses HTTPS, but lacks some advanced security headers and cookie consent mechanisms. Security posture is moderate with no critical vulnerabilities detected. Privacy compliance is basic with a privacy policy present but no cookie consent banner. Contact information and incident response policies are not explicitly provided, which could be improved to enhance trust. Overall, the site is legitimate, safe, and professionally maintained, with room for improvement in security and privacy transparency.

S

stresscoach.at

stresscoach.at

52

stresscoach.at is a well-established Austrian business specializing in stress management, coaching, and mental health services, led by Mag. Brigitte Zadrobilek, MBA. With over 20 years of experience, the company offers a range of services including seminars, coaching, online training, and consulting aimed at promoting healthy performance and resilience in workplaces. The website reflects a professional and consistent brand image, targeting businesses and individuals seeking stress management solutions. Technically, the site is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details are missing. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

Soeurs de Charité de la Sainte-Croix d'Ingenbohl is a religious non-profit organization based in Switzerland, providing charitable and spiritual services primarily to the French-speaking community. The website reflects a well-established entity with clear contact information and a focus on community support and religious activities. Technically, the site is built on WordPress using common plugins such as WPBakery, Contact Form 7, and Complianz for GDPR compliance, indicating a moderate level of digital maturity. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement by adding explicit security policies and headers. Overall, the site is trustworthy, compliant with privacy regulations, and free from suspicious or malicious indicators.

Elisabethenheim Bleichenberg is a healthcare provider specializing in elderly residential and nursing care services located in Zuchwil, Switzerland. The website presents a professional and consistent brand image, targeting elderly individuals and their families seeking quality care and support. Key services include residential living, short-term stays, nursing care, activation therapy, and gastronomic offerings. The business operates likely as a small-sized entity within the healthcare sector, serving a local or regional market. Technically, the website is built on WordPress with common plugins such as WPBakery, Elementor, Contact Form 7, and Complianz for GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

A

ASIATODAY Co., Ltd.

asiatoday.co.kr

47

AsiaToday (아시아투데이) is a well-established South Korean daily newspaper and media company providing comprehensive news coverage across print, web, and mobile platforms. The website offers multi-channel news delivery including real-time domestic and international news, opinion pieces, economic reports, and cultural content. The company operates several subsidiary domains and family sites, indicating a diversified media presence. The website is professionally designed with consistent branding and good content quality targeting a general audience interested in news and current affairs. Technically, the site employs modern web technologies such as jQuery, Swiper.js for UI components, and integrates multiple analytics and advertising tools including Google Analytics, Facebook Pixel, and Naver Analytics. The site is mobile optimized with responsive design and good SEO practices. However, some security headers are not explicitly detected, and there is no visible cookie consent mechanism, which may affect privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. The use of third-party scripts for analytics and advertising is extensive, which introduces moderate user tracking. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data for the domain is unavailable or indicates the domain is not registered in the Korean registry, which is inconsistent with the active and professional website presence. This discrepancy suggests possible privacy protection or registry data issues. Overall, AsiaToday presents a credible and professional media outlet with a solid digital infrastructure. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and security posture.

(

(주)비즈니스포스트

businesspost.co.kr

60

비즈니스포스트 is a well-established Korean economic media company founded in 2013, providing business news, corporate profiles, and economic insights primarily targeting Korean-speaking business professionals and investors. The website is professionally designed with a consistent brand presence and offers a broad range of content including articles, interviews, and forums. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and Microsoft Clarity for analytics and user tracking, hosted likely on AWS infrastructure. The site is accessible, moderately performant, and has basic mobile optimization. Security posture is adequate with HTTPS enforced but lacks some security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. WHOIS data is transparent and consistent with the business identity, supporting high legitimacy and trustworthiness.

S

Scottish Funding Council

sfc.ac.uk

66

The Scottish Funding Council (SFC) is Scotland’s national authority responsible for funding and overseeing tertiary education and research. The organization supports colleges and universities across Scotland to sustain a world-leading education and research system that benefits students and society. The website reflects a mature, government-backed entity with a clear mission and comprehensive service offerings including funding, assurance, skills development, and research innovation. The target audience includes educational institutions, students, researchers, and policy makers within Scotland. Technically, the website is built on WordPress with modern plugins and SEO optimizations, delivering a responsive and accessible user experience. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although explicit security headers could be enhanced. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and UK regulations.

GUROM is a German online platform focused on mobility safety, providing tools for analyzing and preventing accidents on work, school, and business routes. The website targets individuals, companies, and educational institutions, offering tailored prevention measures based on comprehensive mobility hazard analysis. The platform is positioned as a niche service in transportation safety with partnerships from reputable organizations such as DVR and AUVA. Technically, the site is built on TYPO3 CMS with standard web technologies including jQuery and Bootstrap, and it implements HTTPS and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with no critical vulnerabilities detected, though improvements in security headers and incident response disclosures are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, but lacks some advanced SEO and accessibility features.

T

The Quality Assurance Agency for Higher Education

step.ac.uk

68

STEP (Scotland’s Tertiary Enhancement Programme) is a nationally recognized programme designed to enhance the quality of tertiary education across Scotland by fostering collaboration between colleges and universities. Managed jointly by The Quality Assurance Agency for Higher Education (QAA) and the College Development Network (CDN), STEP operates on a four-year cycle focusing on discovery, implementation, and reflection phases to improve learning, teaching, and staff development. The programme is well-positioned within the Scottish educational landscape, supported by key partners including the Scottish Funding Council.

T

The Quality Assurance Agency for Higher Education

enhancementthemes.ac.uk

68

Enhancement Themes is a well-established educational program managed by The Quality Assurance Agency for Higher Education in Scotland, focusing on collaborative quality enhancement in higher education from 2003 to 2023. The website serves as an information hub for staff, students, and stakeholders, providing news, events, and resources related to educational improvement. The organization holds recognized certifications such as ISO 27001 and Cyber Essentials, reinforcing its commitment to security and quality standards. Technically, the site is built on the Sitefinity CMS platform, leveraging modern JavaScript libraries and Google Analytics for user insights. The design is professional, accessible, and mobile-optimized, ensuring a positive user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is robust with clear policies and cookie consent mechanisms. Overall, the website reflects a credible, trustworthy educational entity with a strong market position in the Scottish higher education sector.

B

Bukhman Foundation

bukhmanfoundation.org

50

The Bukhman Foundation is a recently established philanthropic non-profit organization focused on supporting medical research, education, and arts & culture. The foundation positions itself as a catalyst for lasting social change, with notable partnerships such as the Bukhman Centre for Research Excellence in Type 1 Diabetes at Oxford University. The website reflects a professional and consistent brand image targeting philanthropists, researchers, educators, and the general public interested in charitable causes. Technically, the website is built on WordPress with modern frontend technologies like Tailwind CSS and GSAP, hosted by GoDaddy. Performance and mobile optimization are good, though accessibility and SEO could be improved. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is limited to an email address, with no phone or physical address provided. Overall, the website is trustworthy and professional but could enhance security and privacy practices.

Kloster Ingenbohl – Provinz Schweiz is a Swiss-based non-profit religious organization hosting the Barmherzigen Schwestern vom heiligen Kreuz. The website serves as a portal for spiritual services, pilgrim support, community events, and care facilities including an elderly care center and accommodation for visitors. The organization holds a significant historical presence, with notable anniversaries and a strong community focus. Technically, the website is built on WordPress with modern plugins for event management, contact forms, and GDPR compliance, reflecting a moderate to good digital maturity. Security measures include HTTPS, reCAPTCHA, and cookie consent management, though there is room for improvement in security headers and explicit security policies. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, serving its target audience effectively.

B

BIPEM GmbH & Co. KG

reinert-baerchen.com

10

Bärchen.de is the official website for the Bärchen brand, owned by BIPEM GmbH & Co. KG, offering child-friendly food products such as sausages and fruit spreads. The site targets families with children, providing product information, recipes, nutrition advice, and creative activities. The brand has a strong market presence in Germany with over 27 years of history. Technically, the website is built on WordPress with a modern tech stack including jQuery, WPML for multilingual support, and integrates analytics and marketing tools like Matomo, Facebook Pixel, and Pinterest Tag. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is good with HTTPS enforced and privacy-respecting analytics, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its audience.

A

ASKÖ WAT Wien

askoewat.wien

42

ASKÖ WAT Wien is a well-established regional sports association based in Vienna, Austria, operating under the umbrella of the ASKÖ Bundesorganisation. The organization focuses on providing diverse sports programs, supporting sports clubs, and promoting health and fitness activities for a broad audience including athletes, clubs, and the general public. Their website reflects a professional and community-oriented approach with clear navigation and relevant content. Technically, the site uses a mix of established JavaScript libraries and a proprietary CMS, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and active content. Overall, the site is trustworthy and serves its community well, though enhancements in privacy compliance and security hardening are recommended.

H

HostGator | India

hostgator.in

75

HostGator India is a well-established web hosting provider offering a broad range of hosting services including shared, WordPress, cloud, VPS, dedicated servers, domain registration, and website security solutions. The company targets individuals and businesses in India seeking reliable and affordable hosting solutions. The website prominently announces an upcoming merger with BigRock, indicating strategic consolidation in the Indian hosting market. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google Analytics, and various marketing and tracking tools, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security-wise, the site enforces HTTPS and uses reCAPTCHA and cookie consent mechanisms, but lacks explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and well-positioned in the Indian hosting sector, though it could improve transparency around privacy and security policies.

D

Diversidays

diversidays.com

67

Diversidays is a French non-profit organization dedicated to promoting digital inclusion and accelerating diversity within the technology sector. The website presents a professional and consistent brand image, targeting a general audience interested in equality of opportunity and digital empowerment. Their key services revolve around community engagement, inclusion programs, and diversity advocacy in digital fields. Technically, the site is built on WordPress using the Divi theme, with integrations such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The website demonstrates good SEO practices and mobile optimization, although accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and transparency.

B

BECOMTECH

becomtech.fr

58

BECOMTECH is a French organization dedicated to promoting gender diversity and equality in the IT and digital sectors, where women are underrepresented. The website serves as an advocacy and educational platform targeting a general audience interested in technology and social inclusion. The organization appears to be a small-sized entity founded in 2018, with a clear mission to foster inclusivity in technology fields. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Analytics for user tracking and Google Fonts for typography. The site is mobile optimized and presents a professional design with good navigation and content relevance. Security-wise, the site enforces HTTPS and implements a cookie consent banner, but lacks advanced security headers and explicit security or incident response policies. WHOIS data confirms the domain's legitimacy and consistency with the organization's profile. Overall, the website is trustworthy and functional but could improve in privacy compliance and security best practices.

F

France Invest

franceinvest.eu

63

France Invest is a prominent French association that federates actors in private equity, debt, and infrastructure investment to support the growth of startups, SMEs, and mid-sized companies in France. The organization focuses on fostering economic growth, job creation, and infrastructure development. The website reflects a mature digital presence with comprehensive content including studies, events, training, and member services, positioning France Invest as a key player in the French finance sector. Technically, the website is built on WordPress with modern integrations such as Algolia for search, Google Tag Manager for analytics, and a cookie consent framework (Tarteaucitron) ensuring GDPR compliance. The site is mobile-optimized and well-structured, providing a good user experience and SEO optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers are not evident in the HTML. No vulnerabilities or suspicious elements were detected. WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious registration patterns were found. Overall, France Invest’s website demonstrates a strong business credibility and digital maturity with good privacy compliance and a safe content profile. Strategic recommendations include enhancing security headers and publishing explicit security policies to further strengthen trust and compliance.

E

EMNA Web GmbH

deinadieu.ch

55

DeinAdieu.ch is a Swiss-based online service portal operated by EMNA Web AG, specializing in legal end-of-life planning tools such as testament creation, patient decrees, and advance care directives. The platform targets Swiss residents seeking to manage their legal affairs related to inheritance and healthcare decisions. It holds a strong market position within its niche, supported by a consistent brand presence, media recognition, and partnerships with legal professionals. Technically, the website is built on WordPress with modern JavaScript frameworks and libraries, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is robust with HTTPS enforcement and security headers, though it lacks explicit cookie consent and published security policies. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its audience and business model.

C

Caritas beider Basel

caritas-beratung.ch

52

Caritas beider Basel operates the Caritas Beratung website, providing free social counseling services to individuals facing temporary financial difficulties in the Basel region of Switzerland. The organization offers budget relief advice, information on social benefits, and potential financial bridging. The website is well-structured, primarily in German, and targets local residents seeking social support. It holds recognized certifications such as SQS and ZEWO, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress with popular plugins like Yoast SEO and Elementor, ensuring good SEO and user experience. Security posture is adequate with HTTPS enforced, though some security headers could be improved. Privacy compliance is basic but present, with a cookie consent mechanism and a privacy policy page. Overall, the site is professional, trustworthy, and serves a clear non-profit social service mission.

C

Caritas beider Basel

caritas-shop.ch

51

Caritas beider Basel operates the Caritas Shop, a non-profit retail platform offering discounted food and daily necessity items to financially vulnerable populations in Switzerland. The shop also provides social employment opportunities, supporting individuals transitioning into the primary labor market. The website is built on WordPress with WooCommerce and Elementor, reflecting a moderate level of digital maturity with good content quality and user experience. The presence of GDPR-compliant cookie consent and privacy policy indicates attention to privacy regulations. However, security posture shows weaknesses, particularly in credential handling via JavaScript and cookies, and lack of HTTP security headers. Overall, the website is legitimate, trustworthy, and serves a clear social mission with room for security improvements.

O

OneLog AG

oneid.live

72

OneID is a digital advertising identity initiative focused on the Swiss market, enabling privacy-compliant targeting of over 3 million users across premium Swiss publishers. The platform is supported by major Swiss media and advertising companies, positioning it as a key player in Swiss digital advertising. The website is professionally designed, multilingual, and emphasizes user privacy and control through compliance with TCF 2.2 and integration of OneTrust cookie consent mechanisms. Technically, the site is built on Webflow, uses Google Tag Manager for analytics, and includes modern web fonts and scripts, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable due to privacy protection, but the website's professional presentation and partnerships suggest legitimacy. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance.

I

IGT – Institut für Gebäudetechnologie GmbH

igt-institut.de

55

IGT – Institut für Gebäudetechnologie GmbH is an independent German institute specializing in consulting, training, and lectures focused on modern building technology, smart buildings, energy efficiency, and e-mobility. The company targets professionals and organizations seeking expertise in these areas, offering tailored services including inhouse and web-based training. Their market position is that of a niche expert institute with a clear focus on innovative building solutions. Technically, the website is built on WordPress 6.2.8, utilizing Bootstrap for responsive design and common plugins such as Contact Form 7 and Matomo for privacy-conscious analytics. Hosting is provided by rzone.de, a German hosting provider, and the site employs HTTPS with a good SSL configuration. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent banner. However, no explicit security headers were detected in the provided data, and there is no published security policy or incident response contact. The use of Matomo analytics indicates a privacy-aware approach. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve its security posture by implementing additional HTTP security headers and publishing security-related policies. The business information is clear and consistent with the domain registration data, supporting a legitimacy score of 80 out of 100.

S

SFS Group

sfs.com

71

SFS Group is a globally recognized supplier specializing in application-critical precision components, mechanical fastening systems, quality tools, and procurement solutions. The company targets industrial and manufacturing sectors, providing mission-critical products embedded in customer processes. Their market position is strong, with a worldwide footprint and a large operational scale. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored for B2B audiences. Technically, the site employs modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for privacy compliance, indicating a commitment to data protection and user consent. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data limits domain registration trust verification, but the overall site professionalism and active social media presence support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

R

Radio Munot Club

radiomunotclub.ch

32

Radio Munot Club is a non-profit organization supporting the local radio station Radio Munot in Schaffhausen, Switzerland. The club finances investments and supports the training of the radio team, fostering local media presence. The website is well-structured, professionally designed, and provides relevant content for its target audience of members and supporters. Technically, it is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and security headers, but lacks explicit security policies and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible, reflecting a legitimate local media support organization.

W

webEdition e.V.

webedition.org

47

webEdition e.V. operates the website www.webedition.org, offering an open source web application framework and content management system established since 2001. The platform targets developers, agencies, and content editors seeking scalable and flexible CMS solutions with full control over code. The business model is community-driven, supported by a partner network and licensing variants. The website is professionally designed, content-rich, and well-structured, primarily in German, reflecting a mature and active technology project. Technically, the site uses the webEdition CMS platform with PHP, MySQL, JavaScript, Bootstrap, and jQuery, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and Content-Security-Policy headers, though some CSP directives allow 'unsafe-inline' scripts, which could be improved. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent modal, and GDPR adherence. However, WHOIS data is unavailable or malformed, limiting domain trust verification. Overall, the site demonstrates high professionalism and trustworthiness with minor areas for security enhancement.

H

Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (hbz)

hbz-nrw.de

10

The Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (hbz) is a key regional institution supporting library processes and services across academic institutions in North Rhine-Westphalia, Germany. Their website provides comprehensive information about their products, projects, literature search services, and publications, targeting libraries, researchers, and students. The organization is positioned as an essential service provider in the education sector with a medium-sized operational scale and a founding date consistent with the domain registration. Technically, the website is built on the Plone CMS platform, utilizing modern web technologies such as jQuery, Leaflet.js, and FontAwesome. It is mobile-optimized, accessible, and integrates Matomo analytics for privacy-conscious user tracking. The site is served over HTTPS with no detected blocking or WAF interference, indicating good digital maturity. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish a dedicated security policy or incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies, including a consent mechanism. Contact information is available but no direct email addresses are listed in the HTML content. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements include adding security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to enhance security posture and transparency.

A

agence logo

agence-logo.fr

10

Agence logo is a small, professional communication and graphic design agency based in Brittany, France, established in 2009. The company specializes in web design, visual identity creation, and printed communication, serving startups, businesses, institutions, and associations primarily in the Brittany region but also internationally. Their website reflects a consistent brand image and offers a portfolio showcasing their expertise. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO and ElfSight Instagram feed, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and explicit security policies suggests room for improvement. Privacy compliance is partial, with cookie consent mechanisms present but no explicit privacy or terms of service pages found. Overall, the website is professional and trustworthy with moderate tracking and analytics usage.

L

Lichtblick Römisch-katholisches Pfarrblatt Nordwestschweiz

lichtblick-nw.ch

52

Lichtblick Römisch-katholisches Pfarrblatt Nordwestschweiz is a regional non-profit publication serving the Catholic parishes in the Swiss cantons of Aargau, Basel, and Solothurn. The website provides parish news, event agendas, job listings, and multimedia content such as videos and podcasts. It targets the Catholic community and interested readers in the region, positioning itself as a trusted source of religious and community information. The business model focuses on information dissemination and community engagement rather than commercial profit. Technically, the website is built on WordPress 6.8.3 with modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and uses structured data (JSON-LD) for enhanced search engine understanding. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Email addresses are obfuscated to reduce spam. However, some security headers are not explicitly detected and could be implemented to strengthen security posture. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations. It provides clear contact information and maintains a consistent brand presence. The risk level is low, with recommendations focusing on enhancing security headers and ongoing maintenance to ensure continued compliance and security.

A

Aliena

aliena.ch

49

Aliena is a Basel-based non-profit organization dedicated to supporting women involved in the sex industry, including those currently active, former workers, and those seeking professional reorientation. The organization focuses on improving living and working conditions, advocating for rights, and combating social exclusion and stigmatization. Their services include information dissemination, language courses, meeting points, and comprehensive support for integration and personal challenges. The website is multilingual, professionally designed, and provides clear contact information, reflecting a focused social service mission. Technically, the website is built on WordPress with several plugins enhancing functionality such as multilingual support (WPML), email obfuscation, and interactive sliders. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security-wise, HTTPS is properly implemented, and email addresses are protected against scraping. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security posture and privacy compliance. Overall, the security posture is adequate for the organization's scope but lacks formal policies and incident response details. The domain uses privacy protection, which is justified given the sensitive nature of the services. No adult explicit content is present, making the site safe for general audiences. Strategic recommendations include implementing security headers, publishing comprehensive privacy and cookie policies, and adding incident response contacts to enhance trust and compliance.

The website www.oneclickreporting.com/1clickreporting/ serves as a login portal for one-click reporting services, likely provided by Bankhaus Metzler, a reputable German financial institution. The portal targets clients requiring secure access to financial reporting tools. The site is primarily in German with an English option, reflecting a professional and client-focused service. The business model centers on providing secure online access to financial data and reporting services, positioning itself as a specialized service platform within the finance sector. Technically, the site is built using JavaServer Faces (JSF) with PrimeFaces UI components, jQuery, and Font Awesome for styling and interactivity. The presence of Google Fonts indicates some attention to design aesthetics. The site shows moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. The cookie consent mechanism is implemented, indicating awareness of privacy compliance requirements. From a security perspective, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers such as Content-Security-Policy or HSTS in the provided HTML content. No contact information or incident response details are present on the login page, and WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy. However, the strong association with Bankhaus Metzler and links to their official domain for legal and privacy information mitigate some of these concerns. Overall, the site presents a professional and secure interface for its intended users but would benefit from enhanced security headers, improved transparency in contact and incident response information, and resolution of WHOIS data inconsistencies to strengthen trust and compliance.

P

PubliReno GmbH

publireno.ch

48

PubliReno GmbH is a small Swiss company specializing in the retail of regional books and publications primarily from the canton of Graubünden. Their online presence is a WordPress-based e-commerce platform using WooCommerce and Elementor, offering a catalog of over 500 titles from various local publishers. The website is professionally designed with good navigation and mobile optimization, targeting readers interested in regional literature. Technically, the site uses modern web technologies but lacks some advanced security headers and GDPR cookie consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA integration but could be improved by publishing security policies and enhancing privacy compliance. Overall, the business appears legitimate with consistent WHOIS data and clear contact information, though privacy and security policies should be enhanced to meet higher compliance standards.

X

XWiki SAS

xwiki.com

73

XWiki SAS is a well-established technology company specializing in open source knowledge management and collaboration software. With over 20 years of experience, it offers a range of standard and custom solutions including cloud hosting, support, and consulting services. The company serves a broad business audience, including large enterprises such as Amazon and Lenovo, positioning itself as a trusted provider in the enterprise wiki and collaboration market. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the site is built on the XWiki platform with modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, domain protection, and use of CAPTCHA, though explicit security policies and vulnerability disclosures are absent. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high business credibility and technical maturity with moderate user tracking for analytics and marketing purposes.

Lumeum Verein Bethanien operates a cultural and spiritual venue in St. Niklausen, Switzerland, offering an immersive 360° film experience centered on the historical figures Niklaus von Flüe and Dorothee Wyss. The organization targets visitors interested in culture, spirituality, and history, providing ticketing, visitor information, and group visit services. The website is professionally designed, consistent in branding, and provides clear contact details and social media presence, positioning it as a trustworthy small non-profit entity in the hospitality and media sectors. Technically, the website is built on the Contao CMS platform and employs modern JavaScript libraries such as jQuery, Handorgel, and Swipe.js. It integrates third-party booking and tracking services from Smeetz and Google Analytics. The site is mobile-optimized with moderate performance and basic accessibility and SEO features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and visible security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, but incident response and vulnerability disclosure information are absent. Overall, the website is safe, family-friendly, and professionally maintained with a good security posture but could improve privacy compliance and security transparency. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

Ö

Österreichischer Turnerbund

oetb.at

55

The Österreichischer Turnerbund (ÖTB) is a well-established Austrian sports federation focused on promoting gymnastics and physical activity, especially among youth and community members. The website serves as an information hub for events, training courses, and publications, positioning the organization as a key player in Austria's non-profit sports sector. The digital infrastructure is built on WordPress with Elementor, leveraging modern web technologies and analytics tools like Matomo to monitor user engagement while maintaining GDPR compliance through a comprehensive privacy and cookie policy. Security posture is solid with HTTPS and reCAPTCHA protections, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and well-optimized for its audience.

A

Allgemeiner Sportverband Österreich

asvoe.at

49

The Allgemeiner Sportverband Österreich (ASVÖ) is a large, well-established non-profit sports federation in Austria representing over 5,500 member clubs across more than 120 sports. The organization focuses on promoting sports participation, health, and community engagement through diverse programs, education, and support services for sports clubs and individuals. The website reflects a professional and comprehensive digital presence built on WordPress with modern UIkit framework and includes essential features such as GDPR-compliant privacy and cookie policies, multiple social media integrations, and a service platform for clubs. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response information could enhance trust. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the website demonstrates a mature digital infrastructure and a trustworthy business profile.

S

STEINBILD

steinbild-collection.com

55

STEINBILD is a German-based e-commerce retailer specializing in unique handcrafted natural stone wall art. Founded in 2023, the company targets consumers and business customers seeking exclusive design objects made from natural stone. The website is professionally designed, mobile-optimized, and offers a clear navigation structure including product categories, B2B dealer access, and personal design consultation services. Technically, the site is built on the Shopware platform, leveraging modern web technologies and integrating analytics and review widgets. Security posture is good with HTTPS, CSRF protection, and domain status locks, though improvements like DNSSEC and additional security headers are recommended. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the business presents a credible and trustworthy online presence with a niche market focus.

O

OWL Verkehr GmbH

teutoowl.de

57

OWL Verkehr GmbH operates as a regional public transportation service provider and information portal for the TeutoOWL network in Germany. The company offers a range of services including schedule information, ticket sales (such as Deutschlandticket, JobTickets, and SchülerTickets), subscription management, and mobility services like call-collect taxis and night buses. The website targets public transport users in the OWL region, providing comprehensive and accessible information to facilitate mobility. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, Bootstrap, and FontAwesome. It employs Matomo analytics with a cookie consent mechanism, indicating a privacy-conscious approach. The site is hosted on infrastructure associated with DomainControl, uses HTTPS with strong SSL configuration, and demonstrates good mobile optimization and accessibility. From a security perspective, the website enforces HTTPS and uses privacy-friendly analytics. However, it lacks explicit security policy documentation and incident response contact details. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with a legitimate regional transportation entity. Overall, the site maintains a good security posture with room for improvement in transparency and security headers. The overall risk assessment is low, with the website presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include publishing a security policy, adding incident response contacts, enhancing security headers, and maintaining regular security audits to sustain and improve the security posture.

E

Energieversum GmbH & Co. KG

energieversum.de

70

Energieversum GmbH & Co. KG is a German company specializing in photovoltaic and solar energy solutions, offering comprehensive all-inclusive packages for residential and commercial customers. The company is positioned as a reliable provider with a strong market presence, supported by its affiliation with the EnBW Group, one of Germany's largest energy companies. Their services include photovoltaic systems, energy storage, electric vehicle charging stations, heat pumps, and financing options, targeting customers seeking sustainable and cost-effective energy independence. Technically, the website is built on WordPress with modern technologies such as Bootstrap, jQuery, and integrates marketing and consent management tools like Google Tag Manager, Visual Website Optimizer, and Usercentrics CMP. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting appears to be managed via 1&1 IONOS, inferred from nameservers. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks visible advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed through cookie consent but lacks explicit privacy and terms of service documentation. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance the security posture and compliance maturity.

A

alpha logs GmbH

alphalogs.de

62

alpha logs GmbH operates the website alphalogs.de, providing expert consulting and management services for logistical change processes targeting companies in industry, trade, and services sectors. The company positions itself as pragmatic, experienced, and future-oriented, focusing on supply chain and intralogistics solutions primarily for medium-sized enterprises and corporations in Germany. The website is professionally designed, multilingual (German and English), and optimized for user experience and SEO. Technically, it is built on WordPress with modern plugins such as Rank Math SEO and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital presence with good privacy compliance and business credibility.

T

TMC GmbH

tmc-gmbh.de

38

TMC GmbH is a medium-sized marketing agency based in Germany, specializing in creating emotional brand experiences across digital and analog environments. The company operates multiple specialized agencies under its group, including Amplio®, TMC Brandwork, and TMC Live, offering services such as marketing consulting, brand development, event management, and video production. The website reflects a strong market position as the largest marketing agency in the Ostwestfalen-Lippe region, targeting businesses seeking comprehensive marketing solutions. Technically, the website is built on a modern stack including OctoberCMS, JavaScript libraries like jQuery and Vime.js for video playback, and integrates Google Tag Manager and CookieFirst for analytics and consent management. The site is mobile-optimized with good SEO practices and a professional design, providing a positive user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and documented security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is consistent with a legitimate business domain, with no privacy protection or suspicious patterns. Overall, the website demonstrates a high level of professionalism, good security posture, and compliance with privacy regulations, making it a trustworthy digital presence for the company.

R

RBA Libros

rbalibros.com

66

RBA Libros is a prominent Spanish publishing house specializing in adult fiction and non-fiction literature, offering a diverse catalog through multiple well-known imprints such as Gredos, Serie Negra, and National Geographic. The company operates under the Grupo RBA umbrella, positioning itself as a key player in the Spanish media and publishing sector. Their website provides comprehensive access to their catalog, news, and social media engagement, targeting general adult readers interested in literary content. Technically, the website employs a modern JavaScript stack including RequireJS, jQuery, and LazySizes for optimized content delivery and lazy loading. It integrates GDPR-compliant consent management via the Didomi SDK and uses Google Tag Manager for analytics and marketing. Hosting of static content is done through Microsoft Azure Blob Storage, indicating a robust infrastructure. The site is mobile-optimized with good SEO and accessibility practices, although some improvements in security headers could be made. From a security perspective, the site enforces HTTPS and uses consent mechanisms aligned with GDPR. However, the absence of explicit security headers and a published security policy or incident response contact reduces the overall security posture. The missing WHOIS domain registration data is a notable concern, as it creates uncertainty about domain legitimacy despite the professional appearance and consistent branding of the website. Overall, RBA Libros presents a trustworthy and professional digital presence with strong content and compliance features. The primary risk lies in the lack of transparent domain registration information and some minor security best practice gaps. Addressing these would enhance trust and security assurance for users and partners.

R

RBA

rba.es

59

RBA is a leading Spanish media group specializing in the publication of magazines, books, and collectibles. The company operates multiple business divisions with dedicated websites and e-commerce platforms, serving a broad general audience interested in media and publishing products. The website presents a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and a consent management platform (Didomi) to ensure GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are not explicitly detected and could be improved. WHOIS data is unavailable due to access restrictions from the Spanish domain registry, limiting full domain legitimacy assessment. Overall, the site is safe, compliant, and professionally maintained, with moderate user tracking and good privacy practices.

Veoxa is a French-based performance marketing platform specializing in affiliate marketing and programmatic advertising. Established in 2007, it connects advertisers with a premium network of publishers to generate performance-based transactions. The company emphasizes results-driven marketing, offering dedicated account management and media buying services. The website is professionally designed using WordPress and related technologies, hosted on AWS infrastructure, and integrates well-known affiliate partners such as Kwanko, Awin, and Tradedoubler. While the site is accessible and well-structured, it lacks some advanced privacy and security features such as cookie consent mechanisms and security headers. No direct contact emails or phone numbers are provided, with communication primarily via contact forms. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

G

Ginto

sitios.info

50

Ginto is a Swiss non-profit organization providing a comprehensive platform for information about the accessibility of locations across Switzerland. The website offers tools such as a web map and a mobile app to find, record, and share accessibility data. The platform targets individuals seeking accessibility information and those willing to contribute data, positioning itself as a leading resource in this niche. Technically, the website is built on Webflow with modern JavaScript libraries and integrates Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and accessible, with multilingual support in German, French, and English. Security-wise, the site uses HTTPS and secure forms but lacks explicit security headers and published security policies, which could be improved. WHOIS data is unavailable due to privacy or query failure, which slightly impacts trust but is understandable for a privacy-conscious non-profit. Overall, the site is professional, functional, and trustworthy with room for enhanced security and privacy transparency.

B

BenefitWorld

benefitworld.at

67

BenefitWorld is an Austrian cashback and discount platform offering users cashback and savings across approximately 800 partner webshops, with a strong focus on travel and shopping. The website is built on Drupal 9 and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook SDK, and Mailchimp. The platform demonstrates a good level of digital maturity with mobile optimization and a professional design. Security posture is solid with HTTPS enforced, reputable SSL certificates, and security headers, although there is room for improvement in cookie consent mechanisms and published security policies. Overall, the site is trustworthy and well-positioned in the Austrian e-commerce cashback market.

B

Bank Austria

cashbackonline.at

62

The website cashbackonline.at is a cashback and discount platform affiliated with Bank Austria, targeting primarily Austrian customers interested in online shopping and travel deals. It offers cashback incentives across a wide range of partner shops and travel services, positioning itself as a value-added service for Bank Austria customers. The platform is built on Drupal 9 and employs modern web technologies including Google Tag Manager and Owl Carousel for enhanced user experience. Security posture is strong with HTTPS enforced and multiple security headers present, though there is room for improvement in cookie consent mechanisms and incident response transparency. The absence of WHOIS data limits domain trust assessment, but the website's branding and certifications indicate a legitimate and professional operation.